Confidentiality is a safeguard. A safe haven. When an external complaint arrives about a senior figure at the organisation, the board usually has a process that guides what to do next.

But what happens when that safeguard doesn't hold?

Perhaps one of the directors has known the named individual for a decade, through three reappointments and the kind of shorthand that builds up between people who have spent years reading the same papers and covering for each other in the ordinary way that long-serving colleagues do. He reads the complaint at the same time as everyone else on the board. But unlike the other directors, within the week, he has found a way to let his colleague know something is coming.

The director will not call this a leak. He will call it fairness.

Nobody should have to walk into a difficult conversation blind, he tells himself, and there's enough truth in that to make it feel principled. It is due process, this director tells himself, preferring a far more comfortable narrative than facts: a (confidential) process the board has agreed to has been overridden by one person's private judgement that a colleague deserved better than the process could offer.

Now this, of course, is a conduct matter, and it should be handled as one. But the conduct itself is the smaller part of what the board now has to repair. The larger part is what the breach does to the ten or eleven people who were in that room when the confidentiality was requested and affirmed, and ultimately denied when this individual decided he would not respect the process. 

A board does not run on trust between the board and its clients alone. It runs on trust between the directors, that when they design a process together, that process is what actually governs behaviour, not merely what governs behaviour for everyone except whoever finds the exception easiest to justify. Once one director has shown that a process can be quietly worked around for reasons that sound principled in the moment, every director in that room now knows something they did not know before: the safeguard is only as strong as the least disciplined person subject to it. 

The next complaint the board receives will not be handled with the same confidence, whether or not anyone says so out loud. Some directors will start hedging, raising concerns informally before they ever reach the papers, because the papers no longer feel safe. Others will over-engineer the next process with layers of restriction that make it slower and more defensive, treating every future colleague as a risk to be managed rather than a director to be trusted. Either way, the board’s capacity to hold a difficult matter cleanly, the thing the whole structure existed to protect, has been damaged by someone inside the room, not by anyone outside it.

A board does not fall apart in one fell swoop. Rather, small rebellions chip away at the commitments made until there’s little left to salvage. I have sat on and with boards before and after this has happened. The tell is rarely the director who invalidated the process. It is the room of onlookers left behind, quietly disappointed, unsure what to say or do next, preferring deference on questions it once was willing to take a view on. 

Disciplining the director who broke the process is necessary but that is not repair. The repair is rebuilding the board’s confidence in its own commitments, so that the next time eleven people agree on a safeguard in a room, eleven people can still believe it will hold until they have agreed what to do next. 

The client, for what it is worth, will likely never know any of this. They will not know which director it was, or what they told themselves while doing it. What they will know, or come to suspect, is that the subject of their complaint started behaving differently around them before the board had reached any view at all. That has a reach far beyond the boardroom. But the failure that made it possible sits inside the boardroom, in a board that stopped being able to trust that its own processes would hold, one reasonable-sounding exception at a time.

If a safeguard your board agreed to has already been quietly overridden once, the question worth asking is not only what happens to the director who did it but whether the rest of the board can still function cohesively, or whether every future matter will be impacted by someone who decides the rules do not apply to them. 

If you’re in a situation where confidentiality around the board table has been breached and you need to repair the trust, email us on [email protected].

ICYMI: Every organisation stands for something and communicates it publicly. The test is what it does when standing by that becomes costly or embarrassing. The entries below are this week's examples of organisations meeting that test or failing it. When one fails, the behaviour and the promise are moving in opposite directions, which creates damage that does not fix itself of its own accord.

⬆ Up (who hit the mark this week)

Financial Reporting Council sanctioned firm King & King and engagement partner Milankumar Patel over serious ethical-standards breaches across four GFG Alliance/Liberty Steel-linked audits, with the Final Decision Notice finding the firm's GFG fees represented approximately 33% of its total income in FY20, before rising to 41% in FY21. Patel's total penalty reached £326,184 alongside a three-year prohibition on statutory audit work. Acting deputy executive counsel Andrew Twomey said the failures were particularly egregious and the action should send a clear message to the audit community that this behaviour will not be tolerated. 

Financial Conduct Authority publicly censured CACEIS Bank UK over weak financial-crime controls that let collapsed wealth manager WealthTek hold client assets it was never permitted to touch; the bank agreed a voluntary ex-gratia payment of £31,714,068 to affected clients, letting it avoid a £23,091,000 penalty after a 30% settlement discount. Enforcement director Therese Chambers said strong financial crime controls keep clients' assets safe, and CACEIS UK's failures exposed clients to serious risk. The censure without a headline fine drew mixed reviews, but the money reached the people who lost out. 

Nursing and Midwifery Council has responded to Baroness Amos's independent national maternity and neonatal investigation, drawing on 450 families across 12 NHS trusts. The regulator accepted responsibility for its own part in systemic failure, with chief executive Paul Rees saying the NMC must take responsibility for where it has fallen down and improve its response to maternity failings. NMC set out an evolving reform package: strengthening midwifery education, modernising its Code and improving referral routes for women and families, all to be measured against the government's forthcoming National Action Plan.

Charity Commission opened statutory inquiries into connected charities Jesus Power House Ministries and Centre for Skills Enhancement, then removed and disqualified trustee Onyekachi Anyanwu after finding the charities had altered original financial documents, could not substantiate £652,000 of gift-aid claims, and had been operating invalidly with a single trustee. 

⬇ Down (who missed the mark this week)

Nationwide Building Society faced accusations of running down the clock to maximise its Quick Vote and of redacting member-nominated candidate James Sherwin-Smith's election address, then confirmed 600 job cuts across roughly 25,000 staff, its first redundancies since the Virgin Money takeover. Turnout last year was under 8% (670,000 of 9.3 million eligible members voted), with 87% of voters using the Quick Vote, and Sherwin-Smith is the first member-nominated candidate on the ballot since 2005.  

Lloyds Banking Group is retiring the 173-year-old Halifax name and moving every customer to Lloyds, insisting nothing customers know and love will change, from app design to sort code. Halifax Labour MP Kate Dearden called the move bitterly disappointing, and Luddenfoot Labour councillor Scott Patient warned it might prove more damaging to Lloyds than they realise, adding that with one hand they giveth, and with the other hand they taketh away. 

United Utilities is asking shareholders to approve a £435,000-a-year share allowance for chief executive Louise Beardmore, a fixed award proposed after regulator Ofwat blocked her £417,000 bonus over a December 2024 reservoir incident that killed thousands of fish. Advisory group ISS has urged investors to reject the policy at the 17 July AGM, warning it would substantially increase guaranteed remuneration and weaken the link between pay and performance. River Action chief executive James Wallace said calling a £435,000 bonus an allowance fools nobody, while Beardmore’s total package still rose 44% to £2.5m in 2025 to 2026. 

👁 Watch (who we're watching this week)

Thames Water / Ofwat. The utility's future remained unresolved and politically charged as the £10bn London & Valley Water creditor rescue sat under Ofwat review, with special administration still live and prospective Labour leader Andy Burnham's public-ownership stance adding fresh uncertainty.

Getty Images and Shutterstock merger collapse. Getty Images has called off its $3.7bn merger with Shutterstock after refusing the UK CMA's condition, set out in its 15 May final report, that it sell Shutterstock's editorial arm and the Rex Features, Splash News, and Backgrid agencies that supply UK media. The regulator judged that combining them would thin choice and push up prices for outlets that depend on the imagery. Both firms had pitched scale as their answer to AI-generated competition, so walking away leaves each facing that pressure alone; Shutterstock shares plunged about 29%, and Getty faces a $40m breakup fee. When the strategy meant to secure the future is blocked at the final hurdle, how either company keeps its commitments to customers and contributors is left wide open.

Europe's carmakers. BYD's European special adviser Alfredo Altavilla told the Reuters Automotive Europe conference in Frankfurt that Volkswagen's plan for deep cost cuts, reportedly up to 100,000 jobs and four German factory closures, is the first real wake-up call for the European industry, adding that some others are still living in the dreams of legacy OEMs ruling the world.

Since last week, KPMG Australia's chairman and two more partners resigned this week after a whistleblower's allegations that partners used a client's confidential board papers to win work from its competitors. KPMG's own internal review had already looked into the claims and cleared everyone involved. It took a senator using parliamentary privilege to get the full picture out: not one incident but three, and a whistleblower who resigned and paid, by the firm's own admission, the heaviest personal cost of anyone involved.

So: if you were an employee and saw a whistleblower lose their job but knew the people they complained about kept their jobs for months after the report was made, would you conclude raising a concern is worth the risk?

That SEO task that keeps getting pushed? AutoSEO handles it permanently. Articles, mentions, backlinks — running after setup without you touching it again. Over 2,500 small business owners went from "I'll get to it" to "it's already done."

Get my free plan

Led by Leah Brown FRSA, The WayFinders Group repairs the internal damage inside organisations restoring their capacity to do what they said they would.